WordPress Plugin Vulnerabilities

Checkout Plugin - File Upload Remote Code Execution

Description

The WordPress Checkout WordPress plugin was affected by a File Upload Remote Code Execution security vulnerability.

Affects Plugins

Plugin icon
wordpress-checkout
No known fix

References

URL
https://packetstormsecurity.com/files/#123866/

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
ea15261f-5942-4f76-9b70-c04c9cdb301a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2021-06-07
Title
WordPress Popular Posts < 5.3.3 - Authenticated Code Injection
Published
2014-08-01
Title
Archin 3.2 - hades_framework/option_panel/ajax.php Configuration Option Manipulation
Published
2025-09-26
Title
YayCurrency < 3.3.2 - Admin+ Remote Code Execution
Published
2015-10-23
Title
Form Manager <= 1.7.2 - Authenticated Remote Command Execution (RCE)
Published
2014-09-16
Title
WordPress 3.9 & 3.9.1 Unlikely Code Execution